CVE-2015-1221 PUBLISHED

Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, related to the shutdown function in web/WebKit.cpp.

EPSS 0.87% · 75.0th percentile

Risk Scores

EPSS Score
0.87%
75.0th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSoxide-qt1.4.3-0ubuntu0.14.04.1, 0, 1.0.0~bzr437-0ubuntu1
Ubuntu:14.04:LTSchromium-browser29.0.1547.65-0ubuntu2, 31.0.1650.63-0ubuntu1~20131204.1, 32.0.1700.107-0ubuntu1~20140204.977.1

Timeline

References

Open in Interactive Console →